Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Please help...Got Trojan-spy.html.smitfraud.c [CLOSED]

ariel2000

Posted 22 July 2005 - 11:29 AM

ariel2000

New Member

Member

5 posts

Hi. First time posting.

I have two laptops and one of them has Trojan-spy.html.smitfraud.c. I cannot surf the net with that laptop. I read the "You must read this before posting..." and tried to download Winsock2Fix and Cleanup. Winsock2Fix seemed to have loaded however, I still cannot surf the net. When I try to load Cleanup, it tries to install then states at the end of installation "The application failed to initialize properly...". Same goes with all the other tools that you have listed. Luckily, I was able to download and install hijackthis. So, here is the log file.

When it's finished it will reboot your machine to finish the cleaning process.

The tool creates a log of the fix which will appear in the folder.

If it doesn't find any of the SE files or any hidden reinstallers it will say system clean and not go on to next stage.

4. Once it is finished, run CWShredder - Hit The FIX button!

5. Reboot and post a new HJT log and the log that was created by 'SpSeHjfix'.

Warning Note: On a few occasions it has been reported that after using the SPSEHjfix you cannot open Internet Explorer. To fix this, go into Control Panel >Internet Options >Programs & press reset web settings, then you can set your home page to what you want on the general tab.

ariel2000

Posted 22 July 2005 - 02:07 PM

ariel2000

New Member

Topic Starter

Member

5 posts

Trevuren,

I saw your reply right before I went to lunch. So, I downloaded CWShredder and SpSeHjfix.zip. When I followed the steps for SpSEHjfix, as soon as I clicked on "start disinfection", it gave me a pop up saying that the computer needs to restart so I let it restart then the same window came up so clicked on "start disinfection" and again in a split second, it asked me to restart. I restarted and went to lunch. When I logged back on, it didn't give me the same window but it had other errors (which I closed so I can't remember what they were now). I tried again to "start disinfection" but now, the computer doesn't seem to respond to it. I can close out the window but that's about it.

Trevuren

Posted 22 July 2005 - 02:57 PM

ariel2000

Posted 22 July 2005 - 06:31 PM

ariel2000

New Member

Topic Starter

Member

5 posts

Trevuren,

Thanks for your responses. Unfortunately, I've been in meetings all day and haven't been able to get back to troubleshooting this. I'm having problems with a work laptop which I will not be taking home. So when I'm back in the office on Monday, I'll post a new HJT log and go from there. Hopefully, you are able to help me on Monday.

Trevuren

Posted 25 July 2005 - 10:34 AM

The following is just a partial fix to clean up some of the mess that still remains. I need a few questions answered before I can develop a final solution:

1. Do you know what this CIATOOL is? I can't get info on it

2. 023 Hibernation: Do you have your system in that state when not in use?

3. R Latest/ ....../ W2iFF.exe : I can't get any conclusive info on this either

============================================

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order in which they are mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes.

We need to make sure all hidden files are showing so please:

Open My Computer.

Select the Tools menu and click Folder Options.

Select the View Tab.

Under the Hidden files and folders heading select Show hidden files and folders.